1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
Source: arno-iptables-firewall
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Uploaders: Sven Geuer <sge@debian.org>
Section: net
Priority: optional
Build-Depends: debhelper-compat (= 13),
po-debconf
Standards-Version: 4.7.2
Rules-Requires-Root: no
Vcs-Browser: https://salsa.debian.org/pkg-security-team/arno-iptables-firewall
Vcs-Git: https://salsa.debian.org/pkg-security-team/arno-iptables-firewall.git
Homepage: https://github.com/arno-iptables-firewall/aif/
Package: arno-iptables-firewall
Architecture: all
Pre-Depends: ${misc:Pre-Depends}
Depends: ${misc:Depends},
# arno-iptables-firewall itself can live with mawk, while the arno-fwfilter
# script requires gawk.
gawk,
iptables,
iproute2,
kmod,
procps
Recommends: curl,
bind9-dnsutils,
rsyslog
Suggests: rpcbind
Conflicts: iptables-persistent
Description: single- and multi-homed firewall script with DSL/ADSL support
Unlike other lean iptables front ends in Debian, arno-iptables-firewall
will setup and load a secure, restrictive firewall by just asking a few
questions. This includes configuring internal networks for internet access
via NAT and potential network services (e.g. HTTP or SSH).
.
However, it is in no way restricted to this simple setup. Some catch words
of additional features, that can be enabled in the well documented
configuration file are: DSL/ADSL, port forwarding, DMZ, port-scan detection,
MAC address filtering.
.
Moreover, it comes with an extensive set of plugins to cover further
requirements. For example SSH brute force protection, traffic shaping,
traffic accounting, VPN support to just mention a few.
|
